Nginx Proxy Manager
Our great sponsors
|Nginx Proxy Manager||crowdsec|
|7 days ago||2 days ago|
|MIT License||MIT License|
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
Nginx Proxy Manager
Ask community: are you OK with headless setups?
2 projects | /r/selfhosted | 5 Jun 2023
I recently had trouble getting an SSL cert, but I found this PR and it already has an image and it works for me. I use Tailscale and my network isn't visible from the internet so I use the DNS Challenge option with GoDaddy and an API key.
[help] Multiple React App Containers with External Reverse Proxy
2 projects | /r/docker | 5 Jun 2023
I'm trying to use the react-express-mysql awesome-compose as a framework for setting up multiple react apps that are tied to the same domain. Once dev is complete, I update the Dockerfile for the frontend to add in Nginx and have Nginx serve the frontend so that it is not running using npm start. I additionally am using Nginx Proxy Manager as a reverse proxy to route where I need and manage SSL termination for me.
Host your own community if Reddit's API rules go into effect
8 projects | /r/selfhosted | 4 Jun 2023
How can I access my local Docker apps by Fully Qualified Domain Name from my MacOS host?
2 projects | /r/docker | 4 Jun 2023
I ended up using the NGINX Proxy Manager [the projects home site] and added certificates but I'm seeing a fair number of installs going with https://traefik.io on YouTube.
Moving reverse proxy from cloudflare
6 projects | /r/selfhosted | 1 Jun 2023
Nginx Proxy Manager is a very easy and popular reverse proxy with a GUI.6 projects | /r/selfhosted | 1 Jun 2023
Otherwise is the Nginx Proxy Manager a nice looking Reverse Proxy based on nginx with a GUI. I've been using it myself for a few years and experienced a few times some stability problems after updating with docker compose. Otherwise rock solid for me.
Internal DNS Entries for Port Numbers?
2 projects | /r/sysadmin | 26 May 2023
I'm looking for a web interface for me to access all my stuff from one domain without any ports
6 projects | /r/selfhosted | 26 May 2023
How do you renew SSL certificates?
6 projects | /r/selfhosted | 23 May 2023
My reverse proxy does it automatically, NginxProxyManager.
Any Idea Where Should I Start? Newbie Here
2 projects | /r/HomeServer | 23 May 2023
Put on Debian or Ubuntu, using docker/docker-compose install Plex, Nextcloud (nice way to store your files), and some sort of reverse proxy like NPM.
Brute.Fail Watch brute force attacks in real time
3 projects | news.ycombinator.com | 2 Jun 2023
Hey we actually built the second part as a product. Its a modern revamp of fail2ban combined with crowdsourcing aspect to deliver an up-to-date blocklist of active threats. You can check it out at https://github.com/crowdsecurity/crowdsec
Did you have serious attacks on your exposed services before?
2 projects | /r/selfhosted | 30 Apr 2023
This tool crowdsec.net is really interesting to mitigate and enact defense systems for different scenarios.
Feature Request: CrowdSec
3 projects | /r/firewalla | 25 Apr 2023
CrowdSec is licensed under MIT open source license, you can find a copy of the text here: “Copyright 2020, CrowdSec SAS (http://crowdsec.net), Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the “Software”), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED “AS IS”, WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.” That’s all there is to it. Like in the case of Debian, you can do anything you want with it, for free, period. You just need to embed this license when you redistribute the product.
Hardening exposed WireGuard ports
3 projects | /r/selfhosted | 6 Nov 2022
Do I need something like crowdsec, or is WireGuard secure enough on its own?
Banning users for certain actions
3 projects | /r/flask | 8 Oct 2022
You could try out https://crowdsec.net. It’s an advanced FOSS framework for detecting a number of different attacks and not limited to just brute force attacks like Fail2Ban as /u/nonself suggests. The basic concept of CrowdSes is that it reads log, detects attacks, mitigates attacks (CrowdSec integrates directly into the Flask application) and shares information about those attacks with everyone else using CrowdSec. Disclaimer: I am head of community at CrowdSec so my opinions may be a little biased :-)
How to access Docker containers on home server from public IP?
6 projects | /r/selfhosted | 4 Oct 2022
You need to setup reverse proxy. nginx-proxy-manager, swag. There are also more options like caddy, haproxy etc... You can also setup a VPN and or a service like authelia, fail2ban, crowdsec to restrict access to your site.
Crosscompiling CrowdSec on amd64 (Ubuntu 22.04) to arm64 (FriendlyWRT / OpenWRT 22.04)?
2 projects | /r/CrowdSec | 24 Sep 2022
Release v1.4.1 · crowdsecurity/crowdsec (github.com)
Block traffic from every country except the USA? - Apache2/SSH
2 projects | /r/sysadmin | 15 Sep 2022
Not what you suggested but have you considered https://crowdsec.net? Not just a collaborative and more advanced version of Fail2Ban but in this case you want it because of the collaborative blocklist; we made an article showing that 92% of attacks was blocked in advanced by ip reputation before any attacks were performed. Disclaimer: I am head of community so I might be a bit biased. It’s still a cool FOSS project though :-)
Newbie help...docker, portainer, godaddy
6 projects | /r/selfhosted | 14 Sep 2022
You need to look into reverse proxy. Most common one is nginx-proxy-manager which has a nice GUI. There is also SWAG. Both can been configured to get free SSL certificates. For security: authelia, fail2ban, crowdsec. I also suggest to configure wireguard, wg-easy. If you have any questions, we are here. Welcome and good luck!
Large scale Internet SSH brute force attacks seem to have stopped here
10 projects | news.ycombinator.com | 29 Aug 2022
So in that way everybody using CrowdSec are helping each other out. More information at https://crowdsec.net.
What are some alternatives?
traefik - The Cloud Native Application Proxy
docker-swag - Nginx webserver and reverse proxy with php support and a built-in Certbot (Let's Encrypt) client. It also contains fail2ban for intrusion prevention.
Fail2Ban - Daemon to ban hosts that cause multiple authentication errors
socks5-proxy-server - SOCKS5 proxy server
pfSense - Main repository for pfSense
acme-dns - Limited DNS server with RESTful HTTP API to handle ACME DNS challenges easily and securely.
docker-pi-hole - Pi-hole in a docker container
bunkerweb - 🛡️ Make your web services secure by default !
caddy-docker - Source for the official Caddy v2 Docker Image
Suricata - Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine developed by the OISF and the Suricata community.
frp - A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.
Wazuh - Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.